This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/1b5722-1dda-4df3-a45c-e6bf316c94a1/1/vTZoYo8N950EfsoNmtz8C2aT4wk.mft
File:                     vTZoYo8N950EfsoNmtz8C2aT4wk.mft (raw, json)
Hash identifier:          M50YAZuM4Hc9FtKGkFtu6Ohn86LWdx0R/pImj9KP5c4=
Subject key identifier:   5D:01:E6:11:98:A9:D2:B1:6E:EB:82:9A:DD:4F:AE:73:9A:48:CA:B0
Authority key identifier: BD:36:68:62:8F:0D:F7:9D:04:7E:CA:0D:9A:DC:FC:0B:66:93:E3:09
Certificate issuer:       /CN=bd3668628f0df79d047eca0d9adcfc0b6693e309
Certificate serial:       019AF23F7C4BDCABE672FB064B4AF76A8ADE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vTZoYo8N950EfsoNmtz8C2aT4wk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e2/1b5722-1dda-4df3-a45c-e6bf316c94a1/1/vTZoYo8N950EfsoNmtz8C2aT4wk.mft
Manifest number:          12D6
Signing time:             Sat 06 Dec 2025 06:00:38 +0000
Manifest this update:     Sat 06 Dec 2025 06:00:38 +0000
Manifest next update:     Sun 07 Dec 2025 06:00:38 +0000
Files and hashes:         1: 0Om0y2WJnxnezCkTIkUnB1aduws.roa (hash: /h/ZFV7Tyfw4gvX/rM0qUi+sUrGWiAq4SLLKFNedki0=)
                          2: 1-AkEgtFYAeYpvfsAvZdlJuyuVF4.roa (hash: bj7r1qBjXXo6AEdGvTw884ILliGHjEYqfvi7PxgbBxU=)
                          3: 18s6iv28JzN23ACcxvidnV4O018.roa (hash: E520J/m/9e2VHqsrljvZsuWV/dovmSdu9Qn56B7khEk=)
                          4: 7HaXNFSYGxOw3R9L6I0z6V-mXb4.roa (hash: iLQ9KNTQ4u3M1tfa+YEpVxilam6XMDqybBUGCnTqiss=)
                          5: 8GAUp0koq7cLyKDBljD12_gS9fU.roa (hash: TLK0INhWOPZtOAAlZEJ0okbttAxXwilC0/Fin663h4o=)
                          6: 8ezldgsZjdYUFJex6k0Ut1HMEC4.roa (hash: bDkmxhsgqaahY46AsODPGEATa+7WHhbve+WtDMm08R4=)
                          7: EDQ-Yk7isf9sH4FXPQShWflCgog.roa (hash: SaxlXz/G0eyL2HVakqjpN328ugQ4obe8PUCDuMchTeo=)
                          8: N9DT59un9kPPAqydx65unLzNI5M.roa (hash: DR7WQ6lKKlByvf06hUpXgwGsB6j3cg+izla7y1IjfTk=)
                          9: PDqkVJ40PrFe4suGg4WOJqzMUow.roa (hash: RXbO3f8rMaUmCLGNqlV1Dn/DyLMq2vMWOPh4GbDgazk=)
                          10: Quc7mdnkYNwrbQhv4ZNnMA-i26Q.roa (hash: qyyVqEo1X6QuUJgPIcFasQ0Ni+mghhtNAyF4nptRM7w=)
                          11: b7dBieR_P9kmLnGcxW0fyaZjeow.roa (hash: 7CjlHKhuVQvksqqfXKK92KNHJPTf/pbKa2kMAV8YPNg=)
                          12: c-Wnlh-kFjP6q7EkrDX-duWttJc.roa (hash: 6Prgxqh9/nVNm4A4c9/ay2pcayT5Dd+P1lar2QOL0DQ=)
                          13: hVFH86LVYnyePIbmaCqfpS5vJKM.roa (hash: Jp2Ho2sVrxwbPVnhT98cuAw+l3HPTfx4q1sSUogMvrs=)
                          14: iL4hRCpLyAzkS7iRbK0kB-K-W-4.roa (hash: ZPL3tMdQLbuvPkq9q+UlEUarVrYcyMhTXlq7N8fBMNw=)
                          15: kPQEqnQ2tyC7d6-aTILssWet_yM.roa (hash: 1lTdkFvpUx4+IWByR4mFr+hq9dYheTg8typs5YnbW5g=)
                          16: lbSLNi1jkFFBTvD9DRpVUVDxKU4.roa (hash: FYaKqxecYgMTbSZpwvOmlyri4oxlPadKxms2T+56wVY=)
                          17: pVgxUhCc7dPqvhiu0OhGRnn06X4.roa (hash: H5Zdm7znexs+7FCW+NTfkFJPDw3F/Gamb5QXizhY9Tk=)
                          18: tBvdEHK96-8IqXDimpyAd6-FvfI.roa (hash: kV3wVJLyHXbFkaWXeqnUNYEgcOQg7ySmIasAR3i9gU0=)
                          19: vTZoYo8N950EfsoNmtz8C2aT4wk.crl (hash: G/PkdQ3BCz2Vmd0Te296WnneHvh/Xka9Ai5euPps5k0=)
                          20: vyDPsQ1FXw7OXoebjCdEso67fJc.roa (hash: 40KxbJ4OGjtphO16wDERCKtpdBirvp5LYlDflcERj1A=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e2/1b5722-1dda-4df3-a45c-e6bf316c94a1/1/vTZoYo8N950EfsoNmtz8C2aT4wk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e2/1b5722-1dda-4df3-a45c-e6bf316c94a1/1/vTZoYo8N950EfsoNmtz8C2aT4wk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/vTZoYo8N950EfsoNmtz8C2aT4wk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 05:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f2:3f:7c:4b:dc:ab:e6:72:fb:06:4b:4a:f7:6a:8a:de
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bd3668628f0df79d047eca0d9adcfc0b6693e309
        Validity
            Not Before: Dec  6 06:00:38 2025 GMT
            Not After : Dec  7 06:00:38 2025 GMT
        Subject: CN=5d01e61198a9d2b16eeb829add4fae739a48cab0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:66:c3:af:e8:96:38:ef:85:b6:21:af:77:e6:
                    8d:b3:91:2a:7a:52:a4:d4:5c:b3:dc:07:b5:9d:83:
                    e8:ac:05:0a:ce:dd:77:6c:7e:ee:f4:47:67:9a:70:
                    30:3c:0d:74:03:78:b4:e5:e6:58:5b:1c:94:00:0f:
                    5b:d4:bc:ad:b2:4b:8f:6d:65:b4:b0:96:d8:d7:9c:
                    dd:ab:3b:e1:46:02:a6:c0:fb:19:95:9e:f7:6e:39:
                    5d:8c:2c:26:24:d4:10:69:7d:81:46:db:e0:e2:d6:
                    5b:02:a9:4a:69:27:68:c4:15:94:83:fb:63:29:df:
                    67:66:f9:00:ff:e6:bf:9c:71:27:7a:5d:04:cf:90:
                    12:34:f2:c0:70:9a:e4:0a:42:9f:77:18:c5:e6:57:
                    49:c9:02:94:4f:86:67:d1:7f:b7:25:66:2e:6c:6a:
                    e8:e6:82:92:9c:03:62:aa:8c:e4:55:d1:ad:16:76:
                    89:88:f8:c8:9d:69:8e:a7:6d:89:23:a3:c6:c2:b3:
                    cf:52:72:57:4b:32:c0:82:ab:e8:cb:d6:42:46:12:
                    c6:2b:8f:57:11:8c:6f:d0:16:28:b0:a4:5c:a2:0e:
                    2e:24:7c:57:fd:36:fb:ed:29:9f:e0:f2:f4:5e:92:
                    27:62:2b:a4:e3:4e:5b:07:f1:3f:da:dc:5f:8d:75:
                    75:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:01:E6:11:98:A9:D2:B1:6E:EB:82:9A:DD:4F:AE:73:9A:48:CA:B0
            X509v3 Authority Key Identifier:
                keyid:BD:36:68:62:8F:0D:F7:9D:04:7E:CA:0D:9A:DC:FC:0B:66:93:E3:09

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vTZoYo8N950EfsoNmtz8C2aT4wk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/1b5722-1dda-4df3-a45c-e6bf316c94a1/1/vTZoYo8N950EfsoNmtz8C2aT4wk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/1b5722-1dda-4df3-a45c-e6bf316c94a1/1/vTZoYo8N950EfsoNmtz8C2aT4wk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         01:83:f2:15:20:2a:69:e9:cc:a9:a7:e3:c4:e3:7d:cc:fc:e0:
         69:42:83:5e:58:4f:ce:b3:7d:6d:24:bc:59:1d:82:ff:3b:d1:
         3a:c0:33:5a:f2:36:40:89:f7:39:c0:d5:b8:56:47:ed:5c:25:
         3f:d1:df:65:e5:f7:00:42:b5:ed:63:73:91:05:51:bf:96:4b:
         64:be:e7:d9:6d:7f:33:05:f1:5e:d1:91:dc:9a:21:a7:69:c0:
         64:10:49:af:59:7b:48:17:cc:cf:80:e6:4c:4d:e4:de:7f:55:
         be:ff:dd:1f:b4:be:56:24:17:18:6f:63:62:32:5b:04:00:25:
         6f:fc:33:4f:99:ec:f4:ca:c4:4f:5a:d7:7a:14:b9:a7:5f:76:
         73:53:9b:eb:4c:b3:51:40:64:3c:db:e9:ec:5e:a4:d4:94:28:
         dc:fe:2e:23:fe:f0:7f:78:93:9f:54:22:e4:43:d6:d9:3c:e9:
         92:24:f4:ca:3d:be:90:81:f7:be:16:d2:e5:74:41:48:6c:c9:
         90:df:f7:dd:9e:9f:ea:4e:10:00:bf:d5:5a:3b:2a:a2:a6:59:
         50:5c:17:9a:bb:0c:3f:a8:ed:7d:c7:1e:f4:98:39:6f:cb:81:
         1d:59:87:1d:b6:41:5b:59:a3:1c:81:bf:16:78:b2:4b:a3:03:
         f1:ee:1d:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 10:54:33 2025 by rpki-client